Skip to content

headlamp values.yaml

routes.outbound

Type: object

Default value
sso:
  enabled: false
  hosts: []

Description: Outbound routes for external service access (e.g., SSO/Keycloak) Big Bang umbrella chart configures these when SSO is enabled

domain

Type: string

Default value
"dev.bigbang.mil"

Description: Domain used for BigBang created exposed services

global.imagePullSecrets[0].name

Type: string

Default value
"private-registry"

openshift

Type: bool

Default value
false

monitoring

Type: object

Default value
enabled: false
serviceMonitor:
  scheme: ''
  tlsConfig: {}

Description: Monitoring toggle, affects servicemonitor and networkPolicies

bbtests.enabled

Type: bool

Default value
false

bbtests.cypress.artifacts

Type: bool

Default value
true

bbtests.cypress.envs.cypress_url

Type: string

Default value
"http://headlamp.headlamp.svc.cluster.local:4466"

bbtests.cypress.resources.requests.cpu

Type: string

Default value
"1"

bbtests.cypress.resources.requests.memory

Type: string

Default value
"2Gi"

bbtests.cypress.resources.limits.cpu

Type: string

Default value
"1"

bbtests.cypress.resources.limits.memory

Type: string

Default value
"2Gi"

waitJob.enabled

Type: bool

Default value
true

waitJob.permissions.apiGroups[0]

Type: string

Default value
"apps"

waitJob.permissions.resources[0]

Type: string

Default value
"deployments"

waitJob.permissions.verbs[0]

Type: string

Default value
"get"

waitJob.permissions.verbs[1]

Type: string

Default value
"list"

waitJob.permissions.verbs[2]

Type: string

Default value
"watch"

bigbang.rbac.enabled

Type: bool

Default value
false

Description: Enable BigBang RBAC management

bigbang.rbac.clusterRoles

Type: list

Default value
- create: true
  name: headlamp-readonly
  rules:
  - apiGroups:
    - ''
    resources:
    - namespaces
    - pods
    - pods/log
    - services
    - configmaps
    - events
    - nodes
    - persistentvolumeclaims
    - persistentvolumes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - deployments
    - daemonsets
    - replicasets
    - statefulsets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - batch
    resources:
    - jobs
    - cronjobs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    resources:
    - ingresses
    - networkpolicies
    verbs:
    - get
    - list
    - watch

Description: ClusterRoles to create Each role defines a set of permissions that can be bound to users, groups, or service accounts

bigbang.rbac.clusterRoleBindings

Type: list

Default value
- name: headlamp-sa-readonly
  roleRef: headlamp-readonly
  subjects:
  - kind: ServiceAccount
    name: dev-sa
    namespace: headlamp

Description: ClusterRoleBindings to create Binds ClusterRoles to subjects (Users, Groups, or ServiceAccounts) For Keycloak SSO, use kind: Group with the Keycloak group name

upstream.image.registry

Type: string

Default value
"registry1.dso.mil"

upstream.image.repository

Type: string

Default value
"ironbank/opensource/headlamp-k8s/headlamp"

upstream.image.pullPolicy

Type: string

Default value
"Always"

upstream.image.tag

Type: string

Default value
"v0.44.0"

upstream.imagePullSecrets[0].name

Type: string

Default value
"private-registry"

upstream.nameOverride

Type: string

Default value
"headlamp"

upstream.securityContext.capabilities.drop[0]

Type: string

Default value
"ALL"

upstream.service.port

Type: int

Default value
4466